Vulnerabilities (CVE)

Filtered by vendor Artifex Subscribe
Filtered by product Mupdf
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-5896 1 Artifex 1 Mupdf 2017-11-04 4.3 MEDIUM 5.5 MEDIUM
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
CVE-2016-8674 1 Artifex 1 Mupdf 2017-11-04 4.3 MEDIUM 5.5 MEDIUM
The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file.
CVE-2011-0341 2 Artifex, Mozilla 2 Mupdf, Firefox 2017-08-17 9.3 HIGH N/A
Stack-based buffer overflow in the pdfmoz_onmouse function in apps/mozilla/moz_main.c in the MuPDF plug-in 2008.09.02 for Firefox allows remote attackers to execute arbitrary code via a crafted web site.
CVE-2016-6525 2 Artifex, Debian 2 Mupdf, Debian Linux 2017-07-01 7.5 HIGH 9.8 CRITICAL
Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a large decode array.
CVE-2016-10221 1 Artifex 1 Mupdf 2017-07-01 4.3 MEDIUM 5.5 MEDIUM
The count_entries function in pdf-layer.c in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted PDF document.
CVE-2017-7264 1 Artifex 1 Mupdf 2017-03-29 6.8 MEDIUM 7.8 HIGH
Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document.